Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa
File: PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa (raw, json)
Hash identifier: 4OKKH899BiMarrXaTVhgCrQZ8xaivHpsNV8dYRA/+C4=
Subject key identifier: 3F:23:76:F1:9B:1F:C7:1D:D3:65:DA:B0:9C:88:8B:8C:8C:57:56:FC
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C6FADB9DA15AF04C1019DE0BD1799
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa
Signing time: Wed 01 Jan 2025 01:48:04 +0000
ROA not before: Wed 01 Jan 2025 01:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56981
IP address blocks: 2a02:2698:7800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6f:ad:b9:da:15:af:04:c1:01:9d:e0:bd:17:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2376f19b1fc71dd365dab09c888b8c8c5756fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:09:f4:76:06:a7:f3:7a:2d:2f:3a:57:25:
44:91:33:74:c5:48:ba:70:5c:eb:8c:8a:82:a4:d7:
d2:99:74:13:e8:10:9f:47:2f:9b:db:23:f1:48:c8:
0c:c2:16:09:8a:ed:32:d2:17:96:24:74:2e:09:76:
6a:84:6e:e5:39:f8:21:65:28:4c:71:d3:75:0b:26:
c6:82:6c:50:3a:5d:e6:a5:1c:69:97:45:fe:21:0a:
4a:9c:80:b2:60:5f:d5:6b:5e:87:dd:d8:f7:89:4f:
d8:03:d1:e9:8b:de:62:b7:6b:ff:5d:3e:7a:35:0c:
71:5d:16:5e:25:d6:96:00:14:c1:06:d1:8b:1e:41:
92:14:05:81:39:31:aa:c5:cc:5a:d6:68:79:cc:1f:
9e:d0:f2:8d:c9:43:92:7d:3b:3d:67:76:af:79:60:
82:8c:de:fb:68:de:b1:f5:c7:29:df:6a:a1:28:6e:
86:d1:f2:7f:9b:40:cd:0a:24:da:00:3d:8b:0e:ae:
25:af:cb:e5:3d:f6:3e:86:65:40:6a:dd:8c:e5:85:
49:24:2f:d6:51:bc:f6:de:32:f3:07:b2:e6:f5:b6:
4b:44:98:06:ad:d5:cd:51:b2:91:6a:6c:6c:b0:41:
2b:13:86:f1:91:ca:ea:5b:ed:ba:0b:83:4c:38:d0:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:76:F1:9B:1F:C7:1D:D3:65:DA:B0:9C:88:8B:8C:8C:57:56:FC
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/PyN28Zsfxx3TZdqwnIiLjIxXVvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7800::/38
Signature Algorithm: sha256WithRSAEncryption
48:7c:ca:90:d2:fc:fe:1e:fd:eb:ce:db:43:bc:aa:7f:01:f3:
17:b6:e2:2f:e8:d0:0a:14:5e:96:1b:cb:26:c3:3b:e2:db:79:
68:f1:36:18:b9:3f:56:91:fa:31:cf:c9:08:5b:c3:df:8a:19:
99:1c:87:71:39:42:97:14:f4:58:0c:75:ce:85:a0:a3:b2:c0:
c7:db:a1:17:03:e8:7b:08:19:77:6a:76:54:cc:2d:d8:9a:44:
c5:f5:15:de:51:38:23:97:2e:4c:59:f3:7d:7c:6c:ac:12:a5:
f8:0a:e4:37:8e:d1:be:7a:31:ce:9c:e2:7c:91:6c:fd:b3:64:
eb:f7:6c:9c:20:21:66:8e:14:89:3b:63:b5:bb:ff:53:b8:64:
f5:ba:27:d9:fe:49:1c:13:e4:a1:de:49:70:6d:5a:8a:e8:ef:
10:e6:31:e7:fa:dd:f3:68:15:d7:00:5f:a4:9d:42:0a:a4:d4:
be:93:40:89:d8:96:3b:05:21:c9:bf:87:ae:cc:db:62:87:23:
d7:71:7e:1a:25:d3:a7:d3:e3:97:04:1c:17:84:9c:14:1b:63:
ce:3b:1f:ed:f1:59:9d:f9:ad:cb:6b:eb:71:2b:e1:3a:0b:27:
a3:dd:d7:3e:37:3d:4d:c4:7c:e1:43:7a:3c:7a:8d:a4:c3:53:
88:d5:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:53 2025 by rpki-client